Lead Cyber Security Risk Manager

UK Home Office; London Borough of Croydon; Hybride; GBP 63 000 - 67 000; Plein temps

Avantages offerts par ce poste

Civil Service Pension

25 days annual leave

Hybrid working

Résumé du poste

UK Home Office in Croydon/Sheffield/Manchester/Glasgow (hybrid) is seeking a Lead Cyber Security Risk Manager to identify, understand and mitigate cyber risks to critical infrastructure and systems. You will advise stakeholders using evidence to support risk-based decisions.

You will lead risk management activities, policy development, and the promotion of Secure by Design principles across teams. A strong track record in governance, risk or assurance is essential, with SC clearance requirements

Qualifications

• Experience in information or cyber security risk analysis for high-risk or critical systems.
• Proven ability to lead and mentor a diverse governance, risk or assurance team.
• Experience developing and implementing security policies and controls.
• Ability to champion cybersecurity risk and embed Secure by Design principles.

Responsabilités

• Independently undertake risk management activities within a practice area and lead threat assessments and security audits.
• Develop risk management policies and assure ongoing relevance to regulations and organisational policies.
• Promote Secure by Design standards across business and technology teams to drive risk-informed decisions.
• Manage risk processes, review controls after security incidents, and oversee remediation actions.
• Ensure identified risks are managed in line with Home Office risk management policies.

Connaissances

Risk management

Threat analysis

Policy development

Secure by Design

Leadership

Stakeholder engagement

Description du poste

Location: Croydon | Sheffield | Manchester | Glasgow (hybrid)

Salary: £62,732 (national) £66,732 (London) plus skills allowance of up to £17,668

Advert close: 4th November 2025

As a Lead Cyber Security Risk Manager in the Secure by Design team, you will identify, understand and mitigate cyber-related risks. You will evaluate the risks to our critical national infrastructure and business critical systems and use your expertise to draw on a range of evidence to proactively advise stakeholders, enabling well-informed, risk-based decision making.

You’ll be joining an expert team of cyber professionals, committed to reducing the exposure to cyber-attack of new and existing digital systems. You’ll be aided in your role by a diverse and supportive organisational culture, and a commitment to further your continuous development.

The Lead Cyber Security Risk Manager supports, plans and develops the implementation and management of organisation-wide processes and procedures for the management, assurance or governance of cyber risk. They will provide tailored expert support and advice that highlights cyber security risks to a range of stakeholders, projects, business teams and service owners, helping them to remedy identified risks by enabling well-informed and auditable decisions, using published guidance and standards, and drawing on a range of experts as well as personal expertise.

As the Lead Cyber Security Risk Manager working within the Secure by Design team, your main day to day responsibilities will be:

• Independently and impartially undertaking risk management activities within a given area of practice or expertise, usually within established security and risk management governance structures. You will lead the independent derivation and analysis of security needs and conduct tailored threat assessments, security audits, or other risk management activities, ensuring consistency with regulations and legislation.
• Developing risk management-related policy and assure the ongoing appropriateness of policy in accordance with regulation and wider organisational and government policies.
• Promote the adoption of Secure by Design principles, standards and best practices across business and technology teams, influencing all stakeholders to make risk-informed decisions that enhance cyber security outcomes while enabling delivery objectives.
• Managing risk management processes, reviewing their efficiency and effectiveness, and leading recommendations for continuous improvement. This includes reviewing internal controls following any security breach, providing advice on how to remediate any vulnerabilities discovered, and agreeing and overseeing remedial solutions, controls and safeguards.
• Assessing reviews and risk assessments and ensuring identified risks are managed in accordance with Home Office risk management policies.

You’ll have a demonstrable passion for Cyber Security with the following skills or experience in:

• Information or cyber security including threat and risk analysis for complex, high-risk and/or mission critical systems, preferably involving the Home Office, Cabinet Office, NCSC or within industry Security Operations Centres (SOCs) and departments.
• Proven ability to lead and mentor a diverse team of governance, risk or assurance specialists.
• Proficiency analysing or implementing technical or security policies in a large organisation. Skilled in balancing security requirements with business impact to ensure practicality and effectiveness.
• Ability to champion cybersecurity risk and ensure ongoing appropriateness or practices.
• Demonstrable experience embedding Secure by Design principles into programmes, products, services or technology solutions, ensuring that security requirements, threat modelling, risk assessment and appropriate controls are considered and implemented throughout the delivery lifecycle.
• The ability to drive cultural and operational change through awareness campaigns, leadership engagement, upskilling initiatives and influencing, persuading and building consensus across diverse stakeholder groups.

Please note that this role requires Security Check (SC) clearance, which requires 5 years’ UK residency in the past 5 years. Failure to meet this residency requirement will result in your security clearance application being rejected. This role requires Non-Police Personnel Vetting Level 3 (NPPV3) clearance.

Why work for us...

Find out more information at: Benefits - Home Office Careers, but some of the primary ones are:

• A Civil Service Pension with employer contribution rates of at least 28.97%.
• In-year reward scheme for one-off or sustained exceptional personal or team achievements.
• 25 days annual leave on appointment, rising with service.
• 8 days of public holidays, plus 1 additional privilege day.
• Where business needs allow, some roles may be suitable for a combination of office and home-based working. This is a non-contractual arrangement where all employees will be expected to spend a minimum of 60% of their working time in an office.